zap

SUSPICIOUS: the skill is internally consistent and uses official ZAP distribution paths, but its stated purpose is to arm the agent with active web scanning and attack capabilities. Main risk is offensive security enablement plus mutable container tags, not malware or credential theft.